Fake PayPal Websites
2 domains flagged by threat-intelligence feeds for impersonating PayPal. Most recent listing: May 9, 2026.
Domains Impersonating PayPal
2 shownHow to spot a fake PayPal site
- • Check the domain against PayPal's official address. Look-alike domains add extra words, hyphens, or unusual extensions.
- • Never log in via a link from an email or text. Navigate to the official site directly.
- • Use a password manager — it will not autofill your PayPal credentials on a look-alike domain.
Frequently Asked Questions
How do I tell a real PayPal website from a fake one?
Always check the domain in the address bar against PayPal's official domain. Impersonation sites use look-alike domains (extra words, hyphens, or unusual extensions). Never enter your PayPal login or payment details on a site you reached from an email or text link — navigate to the official site directly instead.
I entered my PayPal details on one of these sites. What should I do?
Change your PayPal password immediately from a device you trust, and change it anywhere you reused it. Enable two-factor authentication. If you entered card or banking details, contact your bank to freeze or reissue the card, and watch your statements for unauthorized charges.
How are these domains identified as impersonating PayPal?
Each domain on this page was flagged by an upstream threat-intelligence source (URLhaus, OpenPhish, or PhishTank) and contains a PayPal brand reference in a non-official domain, or was reported by that feed as targeting PayPal. See our methodology page for full detail.
How do I report a fake PayPal website?
Report phishing sites to the Anti-Phishing Working Group at reportphishing@apwg.org, to Google Safe Browsing, and to PayPal's official abuse channel. You can also submit it on RecentScam using the Report button.
Stop the next phishing attack before you click.
NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.